That sounds like an exciting and gratifying enterprise.

Yes, any business or organization that handles or transmits patient information upstream from the patient falls under HIPAA and by HHS definition is a "covered entity". I worked within the pharmaceutical and medical device industry for 30 years and oversaw several clinical trials for new devices and I, and our companies, were required to adhere to robust confidentiality provision in handling patient data.

Too many people misunderstand what HIPAA is and they assume that it applies to everyone. There are some other grey areas around college trainers depending on whether they are employed by the university athletic department or by the university hospital to which athletes are referred to for care so a thorough and detailed waiver is probably advisable for all concerned.

Click here for link at https://www.cms.gov/Regulations-and-Guidance/Administrative-